2262 matches found
CVE-2005-0125
Summary: CVE-2005-0125 affects Mac OS X 10.3.7 and earlier. The at family (at, atrm, batch, atq, atrun) did not properly drop privileges, enabling a local user to delete files, execute commands, or read files via crafted job files. This is a local privilege escalation with potential to access or ...
CVE-2005-0125: Undefined Security Weakness
The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to 1 delete arbitrary files via atrm, 2 execute arbitrary programs via the -f argument to batch, or 3 read arbitrary files via the -f argument to batch, which generates a job file that is...
DMA-2005-0127a.txt
DMA2005-0127a - 'Apple OSX batch family poor use of setuid' Author: Kevin Finisterre Vendor: http://www.apple.com/macosx/ Product: at commands = Mac OS X v10.3.7, Mac OS X Server v10.3.7 References: CAN-2005-0125 http://www.digitalmunition.com/DMA2005-0127a.txt...
Apple Mac OS X "at" utilities fail to drop privileges properly
Overview Apple's Mac OS X operating system may allow local privilege escalation in family of "at" commands. Description Mac OS X includes the "at" family of commands in order to schedule tasks. However, a flaw in these commands results in the commands not dropping privileges correctly. This may...
Excite for Web Servers (EWS) AT-admin.cgi Remote Password Disclosure
Binary data 1634.prm...
Mandrake Linux Security Advisory : at (MDKSA-2002:007)
zen-parse discovered a problem in the at command containing an extra call to free which can lead to a segfault with a carefully crafted, but incorrect, format. This is caused due to a heap corruption that can be exploited under certain circumstances because the at command is installed setuid root...
CVE-2003-1073
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. dot dot sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes pla...
udev Persistence
This module will add a script in /lib/udev/rules.d/ in order to execute a payload written on disk. It'll be executed with root privileges everytime a network interface other than l0 comes up. Execution is triggered through at command, so it must be installed on the target. Module Options msf use...
Sun Microsystems Solaris at -r job name handling and race condition vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: at -r job name handling and race condition vulnerabilities Product: Sun Microsystems Solaris Version: all URL: http://isec.pl/vulnerabilities/isec-0008-sun-at.txt Author: Wojciech Purczynski [email protected] Date: November 1, 2002 Update: Janua...
isec-0008-sun-at.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: at -r job name handling and race condition vulnerabilities Product: Sun Microsystems Solaris Version: all URL: http://isec.pl/vulnerabilities/isec-0008-sun-at.txt Author: Wojciech Purczynski Date: November 1, 2002 Update: January 27, 2003...
Sun Solaris 2.52.67.089 AT Command - Arbitrary File Deletion
Sun Solaris 2.52.67.089 AT Command - Arbitrary File Deletion source: https://www.securityfocus.com/bid/6692//info The at utility shipped with Sun Solaris may be prone to an issue which may allow attackers to delete arbitrary files on the system. The vulnerability occurs when using at with the '-r...
Sun Solaris 2.5/2.6/7.0/8/9 AT Command - Arbitrary File Deletion
source: https://www.securityfocus.com/bid/6692//info The at utility shipped with Sun Solaris may be prone to an issue which may allow attackers to delete arbitrary files on the system. The vulnerability occurs when using at with the '-r' option. This option is used to remove previously scheduled ...
Motorola Cable Modem DOS
I've found it trivial to crash the Motorola Surfboard 4200 Cable modem, as installed default by AT&T Broadband Internet. The modem acts as a bridge, but also has an internal RFC1918 IP address 192.168.100.1. Simply nmap'ing the cable user's IP address, ie: nmap -sS -p 1-1024 12.x.x.x will cause i...
CVE-2002-1614
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at...
CVE-2002-0004
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice...
CVE-2002-0004
CVE-2002-0004 describes a heap corruption vulnerability in the “at” utility caused by a double-free during execution time handling, enabling a local user to potentially execute arbitrary code. The issue is evidenced in multiple advisories (e.g., Debian DSA 102-1/102-2) noting that the remote host...
CVE-2002-0004: Undefined Security Weakness
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice...
CVE-1999-1059
CVE-1999-1059 affects the rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems. The vulnerability enables a remote attacker to execute arbitrary commands via rexecd. The provided documents do not specify affected versions beyond AT&T TCP/IP 4.0, nor do they provide remediation steps ...
CVE-1999-1409
CVE-1999-1409 affects the at utility in IRIX 6.2 and NetBSD 1.3.2 and older. Local users can read portions of arbitrary files by submitting the file to at with the -f argument, which causes at to generate error messages that are emailed to the user. The description notes a local-privilege/partial...